Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/b780a0ee-0d24-319f-ad59-98019ee54e2c.roa
File:                     b780a0ee-0d24-319f-ad59-98019ee54e2c.roa (raw, json)
Hash identifier:          yDPmt4ID/I12LcRKC/orZ+GQRy4EO4O9GlkEVCoZDlc=
Subject key identifier:   28:03:61:00:5F:5B:F8:0A:09:38:81:B5:64:0D:23:D8:87:76:E8:4C
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F43285845A15E04BAA81A6EC77431CC00
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/b780a0ee-0d24-319f-ad59-98019ee54e2c.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     14618
IP address blocks:        130.248.164.0/24 maxlen: 24
                          130.248.141.0/24 maxlen: 24
                          130.248.167.0/24 maxlen: 24
                          130.248.199.0/24 maxlen: 24
                          130.248.235.0/24 maxlen: 24
                          130.248.158.0/24 maxlen: 24
                          130.248.203.0/24 maxlen: 24
                          130.248.224.0/24 maxlen: 24
                          130.248.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:04:ba:a8:1a:6e:c7:74:31:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=668f42f6-f7ee-4f37-a349-eb5515ee3b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:8b:89:7f:5a:b9:eb:9d:04:00:19:df:d8:
                    ae:4c:71:0b:17:46:83:9a:d1:f1:c9:8b:cd:ea:7c:
                    a4:cd:b8:c8:61:91:52:1f:7a:30:a7:a3:c1:66:8a:
                    3b:b1:df:fc:1a:10:de:85:14:c7:e0:7f:c1:ac:92:
                    61:c7:61:0f:8b:0d:ca:c4:d2:3e:36:7d:8c:61:ca:
                    ed:98:89:01:30:e8:9b:d2:ad:3a:84:0b:c0:fb:3f:
                    9d:98:d9:33:8f:63:b6:46:ca:52:52:3b:96:95:01:
                    37:b4:ee:ce:e7:20:a0:71:a3:96:82:b1:07:26:90:
                    6a:7b:aa:2f:4a:1c:17:53:10:1e:e9:d3:e8:17:c1:
                    9f:62:2d:61:0a:99:d0:32:7c:7c:9a:2c:c5:d1:59:
                    27:c9:84:93:9f:af:86:7e:70:00:08:e8:44:8e:29:
                    e5:24:cf:a8:4f:86:b3:02:38:c0:dd:00:ae:cb:bf:
                    c9:27:fd:45:02:41:e2:ec:3b:8d:16:db:ed:bc:93:
                    bc:cc:eb:02:93:31:3c:9a:33:82:12:13:1d:d9:ab:
                    76:9c:92:1b:af:51:57:c5:fd:15:6b:29:be:38:c7:
                    79:70:d5:79:1d:da:0b:f8:50:0b:b3:36:da:5b:3b:
                    b0:0a:34:c5:d0:8d:00:2a:e4:f0:60:5f:62:56:7d:
                    d2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:03:61:00:5F:5B:F8:0A:09:38:81:B5:64:0D:23:D8:87:76:E8:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/b780a0ee-0d24-319f-ad59-98019ee54e2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.141.0/24
                  130.248.158.0/24
                  130.248.164.0/24
                  130.248.167.0/24
                  130.248.199.0/24
                  130.248.202.0/23
                  130.248.224.0/24
                  130.248.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:92:7e:40:f1:44:5d:84:58:7a:dc:5f:47:dd:f6:f0:ff:52:
         b4:42:73:0b:d4:c4:2e:30:dc:44:ed:be:80:bd:b6:d5:10:f7:
         2f:a3:3e:e3:5d:4f:8b:c5:5f:b2:28:14:1d:9c:e4:76:41:ea:
         68:33:7e:86:74:14:37:75:a5:e5:f7:7e:c5:d7:e4:9d:df:48:
         f1:82:6f:78:6c:41:4c:23:72:51:50:cd:fe:a2:1c:18:02:a8:
         47:63:94:be:89:21:46:58:da:6f:23:79:09:28:94:37:87:84:
         7a:52:d0:06:00:fa:20:c7:09:a8:20:f8:49:15:4f:fc:7f:f2:
         a1:33:71:77:0d:a4:c7:08:ae:0c:56:b4:67:a5:f8:63:b9:05:
         f0:46:61:b1:bc:fb:42:8e:bf:03:1c:cd:8d:ca:23:38:f4:06:
         27:1c:09:b9:dd:f0:c7:d8:f7:e3:98:22:cc:da:11:da:9b:e7:
         59:38:58:e6:08:21:8e:de:9f:48:34:0c:0b:6e:5c:24:29:a1:
         55:a5:24:8c:d1:dd:99:67:3a:bd:e5:b9:1e:64:04:d9:1c:70:
         f1:b4:d2:a5:b7:a5:6f:8d:6b:54:43:f5:1b:58:18:83:c2:67:
         fc:43:6c:ae:ef:41:81:00:36:85:c1:36:5d:67:58:61:33:2f:
         74:72:17:94
-----BEGIN CERTIFICATE-----
MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEWhXgS6qBpux3QxzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2RiNDJmN2QtYTJhNS00YmEzLTljNTctZDVjM2VlMjUx
MmJkMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk
NjY4ZjQyZjYtZjdlZS00ZjM3LWEzNDktZWI1NTE1ZWUzYjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts6LiX9aueudBAAZ39iuTHELF0aDmtHxyYvN
6nykzbjIYZFSH3owp6PBZoo7sd/8GhDehRTH4H/BrJJhx2EPiw3KxNI+Nn2MYcrt
mIkBMOib0q06hAvA+z+dmNkzj2O2RspSUjuWlQE3tO7O5yCgcaOWgrEHJpBqe6ov
ShwXUxAe6dPoF8GfYi1hCpnQMnx8mizF0VknyYSTn6+GfnAACOhEjinlJM+oT4az
AjjA3QCuy7/JJ/1FAkHi7DuNFtvtvJO8zOsCkzE8mjOCEhMd2at2nJIbr1FXxf0V
aym+OMd5cNV5HdoL+FALszbaWzuwCjTF0I0AKuTwYF9iVn3SHQIDAQABo4IDfzCC
A3swHQYDVR0OBBYEFCgDYQBfW/gKCTiBtWQNI9iHduhMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0
MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMzZWUyNTEyYmQvYjc4MGEwZWUtMGQyNC0z
MTlmLWFkNTktOTgwMTllZTU0ZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2RiNDJmN2QtYTJhNS00YmEzLTlj
NTctZDVjM2VlMjUxMmJkL2NkYjQyZjdkLWEyYTUtNGJhMy05YzU3LWQ1YzNlZTI1
MTJiZC5jcmwwHwYDVR0jBBgwFoAUaulHBlh0VLhldP8K7zRC/dSTB4AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMz
ZWUyNTEyYmQuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAgviNAwQA
gvieAwQAgvikAwQAgvinAwQAgvjHAwQBgvjKAwQAgvjgAwQAgvjrMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
ACqSfkDxRF2EWHrcX0fd9vD/UrRCcwvUxC4w3ETtvoC9ttUQ9y+jPuNdT4vFX7Io
FB2c5HZB6mgzfoZ0FDd1peX3fsXX5J3fSPGCb3hsQUwjclFQzf6iHBgCqEdjlL6J
IUZY2m8jeQkolDeHhHpS0AYA+iDHCagg+EkVT/x/8qEzcXcNpMcIrgxWtGel+GO5
BfBGYbG8+0KOvwMczY3KIzj0BiccCbnd8MfY9+OYIszaEdqb51k4WOYIIY7en0g0
DAtuXCQpoVWlJIzR3ZlnOr3luR5kBNkccPG00qW3pW+Na1RD9RtYGIPCZ/xDbK7v
QYEANoXBNl1nWGEzL3RyF5Q=
-----END CERTIFICATE-----
Generated at Thu May 2 08:56:08 2024 by rpki-client on console-fra.rpki-client.org